Checklist: Preparing Laptops, Phones and Macs Before You Sell Them

The biggest avoidable loss in IT buyback is devices that arrive locked. A MacBook with Activation Lock on, or a phone still bound to a Google account, cannot be reset and resold, so it is priced for parts. Releasing devices takes your IT team minutes per batch and protects most of the value.

Windows laptops and desktops

• Remove BIOS or UEFI supervisor and power-on passwords.
• Deregister devices from Windows Autopilot, otherwise the next owner is pushed back into your tenant.
• Retire or delete devices in your MDM, such as Microsoft Intune.
• Disable firmware-level anti-theft or persistence agents.
• Keep BitLocker on. Certified erasure removes the data regardless, and encryption protects the device in transit.

Macs

• Release Macs from Apple Business Manager (or Apple School Manager).
• Remove them from your MDM, such as Jamf or Kandji.
• Make sure Activation Lock is off: the user signs out of Find My, or your MDM clears it with its bypass code.
• Remove any firmware password on Intel Macs.

iPhones and iPads

• Release devices from Apple Business Manager and your MDM.
• Turn off Find My and sign out of the Apple ID.
• For supervised devices, your MDM can clear Activation Lock.

Android phones, tablets and rugged handhelds

• Remove Google accounts before resetting, otherwise Factory Reset Protection (FRP) locks the device.
• Remove devices from Android Enterprise and Samsung Knox enrolment, including Knox Mobile Enrollment.
• Zebra and Honeywell devices: remove any enterprise lockdown or kiosk profiles.

Network equipment

• Remove Cisco Meraki devices from your dashboard organisation.
• Export any configurations you need. The buyer will erase them.

What not to do

• Do not remove drives unless your policy requires it. It lowers the price and does not by itself prove destruction.
• Do not rely on a quick format. Formatting does not remove data. Ask for verified erasure and a certificate per device. See how certified data wiping works.